Privacy Policy

Who we are

This is the website of Edinburgh Footcare Clinic.  We are committed to respecting and protecting your privacy. This privacy policy details what information we collect about you when using this website and how we use this information.

Types of data we collect

We hold personal data in the following categories:

1. Patient clinical and health data and correspondence
2. Staff employment data
3. Contractor's data
4. Website enquiries

Personal details (such as your name, contact detail and email address) which you provide when submitting an enquiry via our website are recorded for a period of thirty days and are used only to contact you in relation to a request for services. We only collect details which are required in order to deliver a service or to provide you with details about a service which we can provide.

Why we process Personal Data (what is the 'purpose')

'Process' means we obtain, store, update and archive data.

1. Patient data is held for the purpose of providing patients with appropriate, high quality, safe and effective care and treatment
2. Staff employment data is held in accordance with Employment, Taxation and Pension law
3. Contractors' data is held for the purpose of managing their contracts
4. Website enquiry data is held for a period of thirty days in order to allow us to contact you in relation to your enquiry and to refer to historical contacts

What is the Lawful Basis for processing Personal Data?

The Law says we must tell you this:

1. We hold patients' data because it is in our Legitimate Interest to do so. Without holding the data we cannot work effectively.
2. We hold staff employment details because it is a Legal Obligation for us to do so
3. We hold contractors' data because it is needed to Fulfil a Contract with us
4. We hold website enquiries in order to allow us to respond to them effectively

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

You can block cookies by clicking on the Decline button on our site's cookie notification bar. This appears at the foot of each page and your consent can be revoked or changed at any time.

You can also activate the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

The cookies our site uses currently includes:

Mailing Lists

We do not currently operate any electronic mailing lists. If this changes in the future we will obtain your consent first before using your details to contact you.

Google Analytics

Like many websites, this site uses Google Analytics to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Google Analytics makes use of cookies, details of which can be found here. Disabling cookies on your internet browser will stop Google Analytics from tracking any part of your visit to pages within this website. Read more about this policy's section on cookies

Storage of your information

The security of your personal information is important to us and we endeavour to keep your personal details safe at all times. We employ best practise methods to keep this information safe.

Whilst we strive to keep this information safe please remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.

Who might we share your data with?

We can only share data if it is done securely and it is necessary to do so.

1. Patient data may be shared with other healthcare professionals who need to be involved in your care (for example if we refer you to a specialist or need laboratory work undertaken). Patient data may also be stored for backup purposes with our computer software suppliers, who may also store it securely
2. Employment data will be shared with government agencies such as HMRC

Links to external sites

Our website may contain links to other websites run by other organisations. This privacy policy relates to this website only and we encourage you to read the privacy policy on any of the sites you visit. We cannot be held responsible for the practices and privacy policies of other sites even if you access them from our website.

Access to personal information

You may request to have access to the personal information we hold on you at any time and can do so by putting the request in writing to:

100B Saughton Road North, Edinburgh EH12 7JN

We may issue a small charge for this. You may ask for us to amend or delete this information at any time by contacting us at the same address or alternatively email us.

Your rights

You have the right to:

1. Be informed about the personal data we hold and why we use it
2. Access a copy of your data that we hold by contacting us directly. We will acknowledge your request and supply a response within one month or sooner
3. Check the information we hold about you is correct and to make corrections if not
4. Have your data erased in certain circumstances
5. Transfer your data to someone else if you tell us to do so and it is safe and legal to do so
6. Tell us not to actively process or update your data in certain circumstances

How long is the personal data stored for?

1. There is a legal requirement to keep medical notes for a period of time after your treatment. This can vary in length depending on your age and ability to consent but will be for a minimum of 7 years. Data details will be destroyed after this period.
2. We must store employment data for six years after an employee has left
3. We must store contractors' data for seven years after the contract has ended
4. The storage or website enquiry data in our website database is deleted after thirty days

What if you are not happy or wish to raise a concern about our data processing?

You can complain in the first instance to our Data Protection Officer, who is Anne Sibbald, and we will do our best to resolve the matter. Alternatively, you can email us at This email address is being protected from spambots. You need JavaScript enabled to view it.. If this fails, you can complain to the Information Commissioner at https://www.ico.org.uk/concerns, or by calling 0303 123 1113.

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this page. This privacy policy was last updated on 14th May 2018.